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WHAT IS CLAIMED IS: 

1. A method comprising: 

receiving, at a BIOS, a message from an authorized party; 
authenticating the message; and 

controlling a state of a feature of a system resource, 
using the BIOS, according to the message. 

2. The method of claim 1 further comprising verifying an 
identifier in the message against a unique system identifier of 
the system. 

3. The method of claim 1 further comprising writing the 
message into a secure non-volatile location. 

4. The method of claim 3 wherein the secure non-volatile 
location comprises a remote storage. 

5. The method of claim 1 further comprising splicing the 
content of the message into an execution path of the BIOS. 

6. The method of claim 1 further comprising loading and 
executing content of the message using the BIOS at run-time. 
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1 ^f: The method of claim 1 further comprising updating a 

2 feature set of the BIOS according to the message. 

1 ^. A system comprising: 

2 a system resource having controllable features; 

3 a non-volatile memory that stores a BIOS, the BIOS being 

4 adapted to receive a secure message from an authorized party for 

5 controlling at least one of the features. 

□ ^. The system of claim 6 further comprising a write-once 

C§ non-volatile unit for storing a public key accessible by the 

m 

y bios. 

ru 

in *o 

1% 8. The system of claim 6 wherein the BIOS includes 

in 

^2 authentication circuitry for authenticating the secure message 

f3i with a public key. 

1 £). The system of claim 6 further comprising a write-once 

2 non-volatile unit for storing a unique system identifier 

3 accessible by the BIOS. 



14 


Attorney Docket No.r^^C 


_r0559-416001 / P10374 

1'0 . The system of claim 6 wherein the BIOS also includes 
verification circuitry for verifying an identifier in the 
message against a unique system identifier. 

yi . The system of. claim 6 further comprising a secure non- 
volatile location for storing the at least one of the optional 
features to be enabled, the location being readable and writable 
by the BIOS. 

yi . The system of claim 11 wherein the location comprises 
a remote storage. 

l/§ . The system of claim 6 wherein the BIOS also includes a 
feature set that is updated according to content of the secure 
non-volatile storage . 

1/4 . The system of claim 6 wherein the BIOS also includes a 
feature set that is updated according to content of the secure 
non-volatile storage . 

1/5. The system of claim 6 wherein the BIOS loads and 
executes the content of the message at run-time. 
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Kb 

1 1^. A computer program product residing on a computer 

2 readable medium comprising instructions for causing a computer 

3 to: 

4 receive, at a BIOS, a message from an authorized party; 

5 authenticate the message; and 

6 control a state of a feature of a system resource, using 

7 the BIOS, according to the message. 

1 jl . The computer program product of claim 16 further 

r2 comprising instructions for causing a computer to verify an 

5 

t$ identifier in the message against a unique system identifier of 

in 

\M the system. 

?U 

in nJ? 

^ Tl/6 . The computer program product of claim 16 further 


ij£ comprising instructions for causing a computer to write the 
message into a secure non-volatile location. 

1 lj§ . The computer program product of claim 18 wherein the 

2 secure non-volatile location comprises a remote storage. 

1 ^6. The computer program product of claim 16 further 

2 comprising instructions for causing a computer to splice the 

3 content of the message into an execution path of the BIOS. 
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^A. The computer program product of claim 16 further 
comprising instructions for causing a computer to load and 
execute the content of the message at the BIOS at run-time. 

#2. The computer program product of claim 16 further 
comprising instructions for causing a computer to update a 
feature set of the BIOS according to the message. 
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